3782 matches found
DEBIAN-CVE-2009-0413
Cross-site scripting XSS vulnerability in RoundCube Webmail roundcubemail 0.2 stable allows remote attackers to inject arbitrary web script or HTML via the background attribute embedded in an HTML e-mail message...
roundcube -- webmail script insertion and php code injection
Secunia reports: Some vulnerabilities have been reported in RoundCube Webmail, which can be exploited by malicious users to compromise a vulnerable system and by malicious people to conduct script insertion attacks and compromise a vulnerable system. The HTML "background" attribute within e.g. HT...
Thunderbird DoS attacks via malformed MIME emails (Windows)
The host is running Mozilla Thunderbird which is prone to denial of service vulnerability. Vulnerability: Flaw is due to improper handling of multipart/mixed e-mail messages with many MIME parts and e-mail messages with many Content-type: message/rfc822 headers. OpenVAS Vulnerability Test $Id:...
Merak Mail Server Web Mail < 9.4.0 IMG HTML Tag Script Insertion Vulnerability
Merak Mail Server is prone to a script injection vulnerability. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free softwar...
myPHPscripts Login Session 2.0 - Cross-Site Scripting / Database Disclosure
START 0x01 Informations: Script : myPHPscripts Login Session 2.0 Download : http://www.hotscripts.com/jump.php?listingid=69881&jumptype=1 Vulnerability : XSS / Database Disclosure Author : Osirys Contact : osirysatlivedotit Website : http://osirys.org Notes : Proud to be Italian Greets: : XaDoS,...
Motorola Timbuktu's Internet Locator Service real-time data exposed to public.
We just want to make a public warning to those users of Motorola/Netopia Timbuktu Remote Control Software who are using the Internet Locator service. This service allows to locate any Timbuktu's user just by knowing the email. More than five months ago we notified Netopia's customer support...
hplip security update
1.6.7-4.1.el52.4 - Applied patch to make hpssd message parser more robust bug 457052. - Applied patches to fix insecure alert emails bug 455235...
eshop100-sql.txt
, .ss$$$$$$$$$$s, - $. s$$$$$$$$$$$$$$$$Ss - "$$$$$$$$$$$$$$$$$$o$$$ , - s$$$$$$$$$$$$$$$$$$$$$$$$s, ,s - s$$$$$$$$$"$$$$$$""""$$$$$$"$$$$$, - s$$$$$$$$$$s""$$$$ssssss"$$$$$$$$" - s$$$$$$$$$$' """ss"$"$s"" - s$$$$$$$$$$, """""$ .s$$s - s$$$$$$$$$$$$s,... s$$' - ssss$$$$$$$$$$$$$$$$$$$$s. .$$"$. ,...
Kmail CGI authentication bypass vulnerability
Overview Kmail CGI is a web mail system for cellular phones. Kmail CGI contains a user authentication bypass vulnerability. Impact A remote attacker may bypass Kmail CGI's user authentication, and view or delete the emails of Kmail users. Solution None...
desknet's cross-site scripting vulnerability
Overview If a user views HTML email containing a malicious script, it could be executed. This problem allows execution of script having patterns other than those addressed in JVNF88C2C13 additional information to JVN89DE2014. Impact lf a login ID, password, or session information is leaked, an...
Kent Web PostMail vulnerable to third party mail relay
Overview Kent Web PostMail, form mail software that enables sending email from web pages, contains a vulnerability which may allow the third party to relay mail as it does not properly check input. Impact An attacker could possibly compromise the mail server to send an unsolicited email. Solution...
desknet's buffer overflow vulnerability
Overview destnet's contains multiple vulnerability. A malicious script may be executed when an user views a crafted HTML email or information. destnet's contains multiple vulnerability. - A malicious script may be executed when the user views an crafted HTML email or information. - A script writt...
Toshiba HDD & DVD video recorders can be accessed without authentication
Overview Toshiba HDD & DVD video recorders can be accessed without authentication. Impact The user can not notice a forged email signed by a malicious certificate. Solution None...
Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : evolution vulnerability (USN-583-1)
Ulf Harnhammar discovered that Evolution did not correctly handle format strings when processing encrypted emails. A remote attacker could exploit this by sending a specially crafted email, resulting in arbitrary code execution. Note that Tenable Network Security has extracted the preceding...
USN-583-1: Evolution vulnerability
Ulf Harnhammar discovered that Evolution did not correctly handle format strings when processing encrypted emails. A remote attacker could exploit this by sending a specially crafted email, resulting in arbitrary code execution...
Debian Security Advisory DSA 1470-1 (horde3)
The remote host is missing an update to horde3 announced via advisory DSA 1470-1. OpenVAS Vulnerability Test $Id: deb14701.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1470-1 horde3 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Ubuntu 6.06 LTS / 6.10 / 7.04 : mozilla-thunderbird vulnerabilities (USN-503-1)
Various flaws were discovered in the layout and JavaScript engines. By tricking a user into opening a malicious email, an attacker could execute arbitrary code with the user's privileges. Please note that JavaScript is disabled by default for emails, and it is not recommended to enable it...
PHP Project Management <= 0.8.10 Multiple RFI / LFI Vulnerabilities
Exploit for unknown platform in category web applications =================================================================== PHP Project Management = 0.8.10 Multiple RFI / LFI Vulnerabilities =================================================================== PHP Project Management = 0.8.10...
PT-2007-4995 · Apple · Iphone
Name of the Vulnerable Software and Affected Versions: Apple iPhone version 1.1.1 Description: The issue allows remote attackers to steal credentials and read email via a man-in-the-middle MITM attack because Mail in Apple iPhone does not warn the user when the mail server changes or is not trust...
Design/Logic Flaw
Webbler CMS before 3.1.6 does not properly restrict use of "mail a friend" forms, which allows remote attackers to send arbitrary amounts of forged e-mail. NOTE: this could be leveraged for spam or phishing attacks...